CVE-2023-31246

Published: Aug 11, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (4)

Products: Intel: Server Debug And Provisioning Tool

Intel

1 product

Server Debug And Provisioning Tool

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Server Debug And Provisioning Tool	Before 1.4
Intel Server Debug And Provisioning Tool	Version 1.4 build_2
Intel Server Debug And Provisioning Tool	Version 1.4 build_3
Intel Server Debug And Provisioning Tool	Version 1.4 build_4

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html

Source: secure@intel.com

PatchVendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.